This policy explains how INDIELINE SL ("we", "us"), the operator of ColdNina (coldnina.com), handles personal data, in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
INDIELINE SL (NIF B56433113), C/ Mariano Cuber 17, 46011 Valencia, Spain. Contact for any privacy matter: go@indieline.xyz.
What we collect and why
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| The site URL or text you type into the demo | To run the demo you asked for: analyse it, search for matching contacts, and draft a sample email | Performance of a service you request, and your consent when you press "Run it" (Art. 6(1)(b), 6(1)(a)) |
| Your IP address | Rate-limiting and abuse prevention on the demo endpoint | Our legitimate interest in keeping the service secure and available (Art. 6(1)(f)) |
| Any details you give when booking a call | To schedule and hold the demo call you request | Steps taken at your request prior to a contract (Art. 6(1)(b)) |
| Your email and message if you contact us | To reply to your enquiry | Our legitimate interest in responding (Art. 6(1)(f)) |
We do not use advertising, analytics, tracking pixels, or cookies on this site. See our Cookie Policy.
Recipients and processors
To run the demo and the site, your data may be processed by:
- Anthropic, PBC (USA): the AI model that analyses your input and drafts the sample email. Anthropic processes API inputs to return a result and, under its commercial terms, does not use them to train its models.
- Exa Labs, Inc. (USA): the web-search provider that receives a search query derived from your input to find matching public profiles.
- Cloudflare, Inc.: DNS for the domain.
- Notion Labs, Inc.: the calendar/booking tool used if you choose to book a call.
- Our hosting is on our own server located in the EU (Frankfurt, Germany).
International transfers
Anthropic, Exa, Cloudflare, and Notion are based in the United States. Where your data is transferred outside the European Economic Area, it is protected by appropriate safeguards under GDPR (such as Standard Contractual Clauses and each provider's data-processing terms). You can request more detail atgo@indieline.xyz.
How long we keep it
- Demo input is processed to produce your result and is not stored in a database. It exists only in memory for the seconds it takes to run.
- IP addresses are held only transiently, in memory, for rate-limiting (a rolling window of up to 24 hours), and are not written to persistent storage.
- Booking and email data is kept for as long as needed to handle your request and any resulting relationship, then deleted.
Please don't submit other people's data
The demo is for your own company. Do not paste confidential information or the personal data of third parties into it. The named "matches" the demo returns are AI-generated suggestions based on public information and are illustrative only.
Your rights
You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interest. To exercise any of these, email go@indieline.xyz. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Changes
We may update this policy. The current version is always at this page, with the "last updated" date above.